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Top Stories 

• Schools, government offices, and most roads in six outlying counties north of Mobile, 
Alabama, remained closed January 30 after a severe winter storm left people stranded on 
highways or involved in automobile accidents. - Mobile Press-Register (See item 24) 

• A 4-alarm fire broke out January 30 at a strip mall in Elizabeth, New Jersey, destroying 
eight stores and prompting officials to order the evacuation and demolition of surrounding 
stores and a church. - WNBC 4 New York City (See item 33) 

• A fire destroyed the Geraghty Street Building in Fairbanks, Alaska, which contained 
apartment units, a second-hand furniture store, and offices January 29, and left several 
people injured while displacing more than 50 residents. - Fairbanks Daily News-Miner 
(See item 34) 

• One person was injured and 40 residents were displaced in a January 29 fire at the Turner 
Plaza Apartments in Baton Rouge, Louisiana, which caused an estimated $1.25 million in 
damage at the complex. - New Orleans Times-Picayune (See item 37) 
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Energy Sector 



See item 9 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

1. January 29, Southern Maryland Newspapers - (Maryland) Calvert Cliffs nuclear 
reactors back online, connected to grid. Both reactors at the Calvert Cliffs Nuclear 
Power Plant returned to service over the weekend of January 25 after being shut down 
January 21 when an electrical bus was tripped during an unplanned shutdown. 

Source: http://www.sorndnews.com/article/20140129/NEWS/140129185/1074/calvert- 
cliffs-nuclear-reactors-back-online-connected-to-grid 
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Critical Manufacturing Sector 

2. January 30, U.S. Consumer Product Safety Commission - (International) Gree 
expands dehumidifier recall to include GE brand dehumidifiers due to serious fire 
and burn hazards. Gree Electric Appliances expanded a recall of certain models of 
dehumidifiers to include around 352,700 units with the GE brand name sold in the U.S. 
and Canada due to the potential for the units to overheat, smoke, and catch fire. 

Source: http://www.cpsc.gov/en/Recalls/2014/Gree-Expands-Dehumidifier-Recall-to- 
Include-GE-Brand-Dehumidifiers/ 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

3. January 30, KGW 8 Portland - (Oregon) 3 arrested in Beaverton for ID theft ring. 
Three individuals were arrested in Beaverton January 26 after their car was stopped on 
suspicion of shoplifting and were found in possession of 100 counterfeit credit cards as 
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well as thousands of dollars’ worth of gift cards and stolen property. 

Source: http://www.kgw.com/news/3-arrested-in-Beaverton-for-ID-theft-ring- 
242625221.html 



4. January 29, Newark Star-Ledger - (New Jersey) U.S. regulator accuses NJ mortgage 
lender PHH of kickback scheme. The Consumer Financial Protection Bureau 
announced charges January 29 against Mount Laurel-based mortgage lender PHH 
Corp., and several of its subsidiaries for allegedly collecting hundreds of millions of 
dollars through a 15-year kickback scheme by referring business to mortgage insurance 
companies in exchange for payments, causing customers to pay higher borrowing costs. 
Source: 

http://www.ni.com/business/index.ssf/2014/01/cfpb accuses nj mortgage lender phh 
of mortgage insurance kickback scheme.html 

5. January 29, U.S. Attorney’s Office, Northern District of Illinois - (Illinois) U.S. indicts 
corporate audit director on securities fraud charges for allegedly profiting 
$286,000 from insider trading. A certified public accountant in Chicago was indicted 
on federal fraud charges for allegedly engaging in insider trading and making over 
$286,000 in illicit profits in 2012. The accountant was the director of corporate audit 
for Allscripts Healthcare Solutions Inc., and used nonpublic information he obtained in 
that position. 

Source: http://www.fbi.gov/chicago/press-releases/2014/u.s.-indicts-corporate-audit- 

director-on-securities-fraud-charges-for-allegedly-profiting-286-000-from-insider- 

trading 

6. January 29, Reuters - (National) Target: Hackers attacked with stolen credentials. 
Target Corp., reported January 29 that the attackers who perpetrated a massive breach 
of customer payment card data used stolen vendor credentials to access the company’s 
systems. 

Source: http://news.msn.com/us/target-hackers-attacked-with-stolen-credentials 

7. January 29, SC Magazine - (National) Neiman Marcus hack involved two pieces of 
malware. Neiman Marcus reported that two pieces of malware were used to 
compromise its systems in a recent data breach, with the first inserted before July 2013 
which allowed the payment card scraping malware to be uploaded later in the year. 
Source: http://www.scmagazine.com//neiman-marcus-hack-involved-two-pieces-of- 
malware/article/33 1 669/ 
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Transportation Systems Sector 

8. January 30, Florida Department of Transportation - (Florida) Road closures due to 
weather. The Florida Department of Transportation closed Interstate 10 to traffic in 
several counties in the panhandle area of the State January 30 due to inclement weather 
conditions. 
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Source: http://www.wctv.tv/news/floridanews/headlines/Road-Closures- 
242562941.html 



9. January 30, WLEX 18 Lexington - (Kentucky) Tanker spills 8,000 gallons of fuel on 
US-27, driver flown to hospital. A semi-truck carrying gasoline overturned January 30 
on US-27 in Pulaski County and spilled about 8,000 gallons of fuel, closing the 
highway between 4 to 6 hours. The driver was airlifted to a hospital. 

Source: http://www.lexl8.com/news/tanker-spills-8-00Q-gallons-of-fuel-on-us-27- 
driver-flown-to-hospital 

10. January 29, WBZ 4 Boston - (Delaware) Boston-bound flight makes an emergency 
landing in Delaware. A Boston-bound United Express flight that left from Virginia’s 
Dulles Airport was forced to make an emergency landing in Delaware January 29 due 
to an onboard oxygen generator malfunctioning. 

Source: http://boston.cbslocal.com/2014/01/29/boston-bound-flight-makes-emergency- 
landing-in-delaware/ 

1 1 . January 29, New Orleans Times-Picayune - (Louisiana) Louisiana winter weather 
road closures: Updated list from State Police on Wednesday. Winter weather across 
Louisiana caused State Police to close several roadways January 29, including 
interstates, State routes, and local roads. 

Source: http://www.nola.com/traffic/baton- 
rouge/index.ssf/2014/01/louisiana winter weather road.html 

Lor another story, see item 36 
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Food and Agriculture Sector 

12. January 30, Park Rapids Enterprise - (Minnesota) Damage from potato warehouse 
fire near Perham estimated at $4.5 million. Perham fire officials announced January 
29 that a fire at R.D. Offutt Co. potato warehouse January 21 caused an estimated $4.5 
million in damage. 

Source: http://www.parkrapidsenterprise.com/content/damage-potato-warehouse-fire- 
near-perham-estimated-45-million-O 

13. January 29, KDKA 2 Pittsburgh - (Pennsylvania) Firefighters battle 3 Beaver Co. 
fires. A barn in Brighton Township, Pennsylvania, caught fire January 29, killing 4 
horses and 50 sheep. 

Source: http://pittsburgh.cbslocal.com/2014/01/29/three-fires-in-under-2-hours/ 

14. January 29, Food Poisoning Bulletin - (Wyoming) After fatal accident, FDA 
oversees Western Sugar recall. The U.S. Food and Drug Administration announced 
that Western Sugar Cooperative issued a recall of its beet pulp and tailings products 
after a worker was killed in an accident involving equipment that feeds water to beets at 
its Lovell, Wyoming manufacturing facility January 4. 
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Source: http://foodpoisoningbulletin.com/2014/after-fatal-accident-fda-oversees- 
western-sugar-recall/ 



15. January 28, U.S. Food and Drug Administration - (National) Gano Excel USA Inc. 
announces recall of C’Real Spirulina. The U.S. Food and Drug Administration 
announced January 28 that Gano Excel USA, Inc., of Irwindale recalled all C’Real 
Spirulina instant cereal products due to undeclared wheat and soy. 

Source: http ://www .fda. gov/S afety/Recalls/ucm3 8363 8 .htm 
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Water and Wastewater Systems Sector 

16. January 30, WYMT 57 HazardfWSAZ 3 Huntington - (Kentucky) Water outage in 
Ashland spreads, affects more people. Ashland city officials stated that several 
setbacks to the repair of a major water main break January 27 increased the number of 
customers without water to 7,000 and threatened to spread outages to outlying 
communities relying on their water supply. 

Source: http://www.wkyt.com/wymt/home/headlines/Water-outage-affecting- 
thousands-in-Boyd-Countv-24236329 1 .html 

17. January 29, Newark Advocate - (New Jersey) $53K contract OKs dredging to 
remove water plant blockage. The city of Newark approved a $53,000 contract to 
dredge the Licking River in order to clean out silt blocking water intake screens at the 
city’s water treatment plant after heavy rains pushed a sandbar into the screen area. 
Work was expected to begin February 3. 

Source: 

http://www.newarkadvocate.com/article/20 1401 29/NEWSO 1/30 1 29006 1 ?nclick check 
=1 

18. January 29, KDKA 2 Pittsburgh - (Pennsylvania) Water main break affecting 2 
hospitals, Duquesne University. Pittsburgh Water and Sewer Authority (PWSA) 
repaired a break in a 16-inch water main that caused low water pressure for two local 
hospitals and Duquesne University’s campus January 29. 

Source: http://pittsburgh.cbslocal.com/2Q14/01/29/water-main-break-affecting-2- 
hospitals-duquesne-university/ 

19. January 29, Southern California City News Service - (California) Contamination alert 
issued for Imperial Beach coastline after sewage leak. The San Diego County 
Department of Environmental Health issued a contamination alert along several miles 
of shoreline near the U.S. -Mexico border January 29 after a pipeline break at a 
reservoir overwhelmed sanitation diversion pumps and fouled water flowing out of the 
Tijuana River. 

Source: http://www.kpbs.org/news/2014/ian/29/contamination-alert-issued-imperial- 
beach-coastlin/ 
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For another story, see item 38 
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Healthcare and Public Health Sector 

20. January 29, WWJ 62 Detroit - (Michigan) One person arrested in New Center bomb 
scare, evacuation. Medical offices, several businesses, and a preschool in the New 
Center One building in Detroit were evacuated January 29 for more than 3 hours due to 
a bomb threat. One person was arrested in connection to the threat and police cleared 
the scene after a search determined there were no explosive devices in the building. 
Source: http://detroit.cbslocal.com/2014/01/29/detroits-new-center-one -building- 
evacuated/ 



For another story, see item 18 
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Government Facilities Sector 

21. January 30, Memphis Commercial Appeal - (Tennessee) Memphis College of Art 
security guard charged with stealing computer equipment. A Memphis College of 
Art security guard was accused of stealing $10,725 worth of computer equipment from 
the Midtown school after officials reported five pieces of equipment went missing 
January 14. 

Source: http://www.commercialappeal.com/news/2014/ian/30/memphis-college-of-art- 
securit y- guard-charged/ 

22. January 29, WCAX 3 Burlington - (Vermont) Flooding forces evacuation of Green 
Mountain College dorm. Sixty-two students from Green Mountain College in 
Poultney were displaced after a sprinkler system pipe burst in the attic at the Bogue 
dormitory and flooded the building January 25. 

Source: http://www.wcax.com/storv/24582881/flooding-forces-evacuation-of-green- 
mountain-college-dorm 

23. January 29, Colorado Springs Gazette - (Colorado) 2 injured in Fort Carson plane 
crash. Two U.S. Air Force crew members were transported to an area hospital with 
injuries after their aircraft crashed on Fort Carson’s Butts Army Airfield in Colorado 
January 29 during a routine training mission. 

Source: http://gazette.com/2-iniured-in-fort-carson-plane-crash/article/1513601 

24. January 29, Mobile Press-Register - (Alabama) Schools, roads and some offices to 
remain closed until Thursday in Clarke, Conecuh, Covington, Escambia, Monroe 
and Washington counties. Emergency management officials reported that schools, 
government offices, and most roads in six outlying counties north of Mobile would 
remain closed January 30 after a severe winter storm left people stranded on highways 
or involved in automobile accidents. 

Source: http://blog.al.com/live/2014/01/schools roads and some offices.html 
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25. January 28, U.S. Environmental Protection Agency - (Virginia) EPA settlement with 
Virginia military bases protects soil and groundwater from contamination. In three 
separate settlements, the U.S. Environmental Protection Agency settled alleged federal 
and State violations of underground storage tank regulations with the U.S. Army, U.S. 
Navy, and U.S. Air force at three military bases in Virginia. Combined penalties totaled 
$62,634 for all three branches. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/9ba04a61528f223785257c6e006e98df7Qpe 

nDocument 

For another story, see item 20 
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Emergency Services Sector 

26. January 30, WBNG 12 Binghamton - (New York) 911 system restored. Broome 
County’s 9-1-1 system was fully restored January 30 after suffering outages at its call 
center January 29. 

Source: http://www.wbng.com/news/local/911-outages-242626891.html 
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Information Technology Sector 

27. January 30, Softpedia - (International) Remote code execution vulnerability 
impacts Wikipedia and other MediaWiki sites. Researchers at Check Point 
identified a critical vulnerability affecting Web sites created with the 
MediaWiki platform that could be exploited for remote code execution. The 
MediaWiki Foundation issued a patch to close the vulnerability and advised 
users to update their installations. 

Source: http://news.softpedia.com/news/Remote-Code-Execution-Vulnerability- 
Impacts-Wikipedia-and-Qther-MediaWiki-Sites-422079.shtml 

28. January 30, The Register - (International) Security 101 fail: 3G/4G modems expose 
control panels to hackers. A researcher found that several 3G and 4G USB modems 
are vulnerable to cross-site request forgery (CSRF) attacks that could allow attackers to 
access the modem’s control panel Web page and tamper with the device. The 
vulnerabilities could be exploited to send messages to premium-rate numbers and steal 
user credentials. 

Source: http://www.theregister.co.uk/2014/01/30/3gmodem security peril/ 

29. January 30, Softpedia - (International) Barracuda Networks identifies rogue 
SignNow version in App Store. Barracuda Fabs researchers identified a rogue version 
of their SignNow app in Apple’s App Store, and found that developers listed as 
GameStruct and Tektrify are uploading rogue versions of other apps as well. 

Source: http://news.softpedia.com/news/Barracuda-Networks-Identifies-Rogue- 
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SignNow-Version-in-the-App-Store-422306.shtml 



30. January 29, SC Magazine - (International) Before shutdown, ransomware op 
spreading “Icepol” caused 42,000 U.S. infections. Bitdefender and Romanian 
authorities analyzed servers seized in relation to the Icepol ransomware and found that 
the ransomware was installed around 42,400 times in the U.S. between May and 
September 2013. An estimated $32,000 was stolen from U.S. victims. 

Source: http://www.scmagazine.com//before-shutdown-ransomware-op-spreading- 
icepol-caused-42000-us-infections/article/331677/ 

31. January 29, Threatpost - (International) High-volume DDoS attacks top operational 
threat to businesses, service providers. Arbor Networks released its Worldwide 
Infrastructure Security Report and found that distributed denial of service (DDoS) 
attacks were the largest operational threat to service providers and enterprises, reaching 
unprecedented levels in 2013, among other findings. 

Source: http://threatpost.com/high-volume-ddos-attacks-top-operational-threat-to- 
businesses-service-providers/103933 

For additional stories, see items 6 and 7 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

32. January 28, Baltimore-Sun - (Maryland) Some Harford AT&T landline customers 
faced blackout Tuesday. Some businesses utilizing AT&T communications in the Bel 
Air area experienced problems with their landlines for several hours January 28 due to 
a third-party cable cut. 

Source: http://www.baltimoresun.com/news/maryland/harford/belair/ph-ag-att-outage- 
0129-20140128,0, 1503659.storv 
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Commercial Facilities Sector 

33. January 30, WNBC 4 New York City - (New Jersey) 8 New Jersey stores, church to 
be demolished after 4-alarm blaze. A 4-alarm fire broke out January 30 at a strip mall 
in Elizabeth, New Jersey, destroying eight stores and prompting officials to order the 
evacuation and demolition of surrounding stores and a church. Authorities are 
investigating the cause of the fire. 
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Source: http://www.nbcnewvork.com/news/local/Elizabeth-New-Jersey-4-Alarm-Fire- 
Stores-242732211.html 



34. January 30, Fairbanks Daily News-Miner - (Alaska) Geraghty Street apartment fire 
leaves 50 homeless. A fire destroyed the Geraghty Street Building in Fairbanks which 
contained apartment units, a second-hand furniture store, and offices January 29, and 
left several people injured while displacing more than 50 residents. Officials are 
investigating the incident. 

Source: http://www.newsminer.com/news/local news/fire-destroys-geraghty-street- 
apartment-building-several-people-injured/article e5dc0c02-8916-lle3-8722- 
0017a43b2370.html 

35. January 30, WMAR 2 Baltimore - (Maryland) Fire rages in Pikesville apartment 
complex. Authorities are investigating a January 30 fire at a Baltimore apartment 
complex that sent 2 people to the hospital and left 24 residents displaced. 

Source: http://www.abc2news.com/dpp/news/region/baltimore county/fire-rages-in- 
randallstown-apartment-complex 

36. January 30, Pottsville Republican & Herald - (Pennsylvania) Klingerstown post 
office, apartment fire found accidental. Fourteen residents were displaced after an 
electrical fire destroyed a Klingerstown apartment building January 28. A U.S. Post 
Office located below the apartments sustained smoke and water damage. 

Source: http://republicanherald.com/news/klingerstown-post-office-apartment-fire- 
found-accidental-1. 1625632 

37. January 29, New Orleans Times-Picayune - (Fouisiana) Turner Plaza apartment fire 
began in area of heater, caused $1.25 million in damage. The Baton Rouge Fire 
Department responded to a fire at the Turner Plaza Apartments January 29, which 
caused an estimated $1.25 million in damage at the complex. One person was injured 
and 40 residents were displaced. 

Source: http://www.nola.com/traffic/baton- 
rouge/index.ssf/2014/01/turner plaza apartment fire be.html 



T Return to top i 



Dams Sector 



38. January 30, Bandon Western World - (Oregon) Dam leak will be a costly fix. Bandon 
city officials discovered a leak in the Ferry Creek Dam that could compromise water 
flow to the city if left unaddressed. Costs for the repairs to the dam were estimated to 
be between $500,000 and $1 million. 

Source: http://theworldlink.com/bandon/news/dam-leak-will-be-a-costly- 



fix/article ff27b7 10-8925-1 Ie3-a07e-0019bb2963f4.html 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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